This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json) Hash identifier: CnpY77xLfBSmtBHG9133gwCKQNaKYcCo8l6UA9g37u4= Subject key identifier: B2:8D:AF:A9:7E:DF:3D:9A:44:94:7D:98:13:A1:85:81:DA:F9:89:19 Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07 Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307 Certificate serial: 019B1EE1DD626DEB5D20895E45D84BEAFEA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft Manifest number: 1045 Signing time: Sun 14 Dec 2025 22:01:17 +0000 Manifest this update: Sun 14 Dec 2025 22:01:17 +0000 Manifest next update: Mon 15 Dec 2025 22:01:17 +0000 Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: VFoLhP5LGfk3f5CGh0RwsEgRTwsi1RIue6t0iWmpoJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:dd:62:6d:eb:5d:20:89:5e:45:d8:4b:ea:fe:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307 Validity Not Before: Dec 14 22:01:17 2025 GMT Not After : Dec 15 22:01:17 2025 GMT Subject: CN=b28dafa97edf3d9a44947d9813a18581daf98919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:a9:01:96:f8:60:b1:7b:4b:5c:ba:e1:22: c1:3c:b7:05:48:5c:25:f1:fa:d3:24:d0:05:65:0d: 12:ef:ae:16:11:ba:5d:d0:93:43:47:30:c6:71:55: 76:d9:f7:17:ad:e4:21:13:bb:ce:8f:ac:7c:14:36: 4c:da:5d:d7:19:a8:1f:2f:8a:27:64:da:a1:5e:8b: ad:b9:94:43:fa:ac:c0:6d:32:8c:a0:4f:8d:78:1c: 86:75:e0:34:11:48:6e:a3:05:e6:cc:ea:5a:b7:48: 50:a5:cb:64:00:e7:4c:ac:fa:f0:90:ef:aa:84:fc: ef:4e:0f:7f:b8:18:f1:79:5b:5c:15:84:c5:24:a0: b2:1f:d0:d3:c3:05:c3:d8:7f:78:0c:1a:80:df:69: 40:33:ae:81:c8:ae:8c:b1:ce:91:fa:c6:97:58:92: 55:62:7d:b4:aa:30:45:0a:f5:64:90:f4:f4:ca:8f: 0b:ad:67:a7:c5:b1:97:ba:0e:e5:ff:c6:eb:c9:b5: ba:f9:c4:ee:3c:57:08:c3:d3:cc:27:94:97:12:a7: 15:88:79:ef:91:55:36:dd:52:3f:6f:b9:b3:4d:74: f2:ae:b1:6c:f0:5d:2e:09:d2:66:d3:21:3a:5a:c2: 0d:98:d1:5a:6a:66:c5:95:e2:d1:f7:40:07:63:88: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8D:AF:A9:7E:DF:3D:9A:44:94:7D:98:13:A1:85:81:DA:F9:89:19 X509v3 Authority Key Identifier: keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bc:0e:85:83:12:7a:1d:6d:be:ff:59:ba:c4:99:b0:33:aa: 42:ea:da:dd:cb:cd:a2:9f:27:9e:12:93:01:59:c1:36:58:03: 99:17:6d:a0:18:b4:ba:54:ab:09:57:75:a7:ae:f7:b8:06:df: 43:85:25:5e:06:7f:8e:44:e5:ea:b6:a2:dd:bf:56:5b:c1:03: 52:48:f3:42:f3:64:8e:80:d4:7f:cf:27:31:3b:00:ae:65:44: d1:49:13:17:8a:c7:5f:de:4b:09:81:59:23:99:b5:3a:39:c4: 39:7e:72:c1:0e:a9:17:76:43:73:6f:d0:29:59:18:37:61:6d: 5a:6e:3f:1c:2b:67:5e:99:41:c8:07:06:76:af:03:7d:3e:d8: 5e:e9:72:4a:14:e9:73:fa:59:b9:18:c5:c8:a2:59:03:46:37: d2:60:8b:46:2d:90:64:42:3c:9c:ae:89:9a:f6:14:13:c6:e9: 3a:b7:c5:54:8d:8f:0b:25:02:de:a5:12:35:0a:1f:ea:2f:6c: 97:bc:0c:36:8a:d6:e6:11:b9:bf:dd:62:c6:34:86:6f:bc:b7: e0:1c:91:59:1d:c8:3b:f5:9a:33:e0:30:98:53:f3:47:03:bd: 82:c3:e8:c1:03:c1:7b:01:7a:40:f6:47:c6:1c:b7:f9:67:eb: 3c:87:32:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4d1ibetdIIleRdhL6v6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZDdiNWZkMmIyOWM2Njg1ZDdhZTI3NmFkZTcwNGI1ODY2 YzczMDcwHhcNMjUxMjE0MjIwMTE3WhcNMjUxMjE1MjIwMTE3WjAzMTEwLwYDVQQD EyhiMjhkYWZhOTdlZGYzZDlhNDQ5NDdkOTgxM2ExODU4MWRhZjk4OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZqpAZb4YLF7S1y64SLBPLcFSFwl 8frTJNAFZQ0S764WEbpd0JNDRzDGcVV22fcXreQhE7vOj6x8FDZM2l3XGagfL4on ZNqhXoutuZRD+qzAbTKMoE+NeByGdeA0EUhuowXmzOpat0hQpctkAOdMrPrwkO+q hPzvTg9/uBjxeVtcFYTFJKCyH9DTwwXD2H94DBqA32lAM66ByK6Msc6R+saXWJJV Yn20qjBFCvVkkPT0yo8LrWenxbGXug7l/8brybW6+cTuPFcIw9PMJ5SXEqcViHnv kVU23VI/b7mzTXTyrrFs8F0uCdJm0yE6WsINmNFaambFleLR90AHY4gW2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKNr6l+3z2aRJR9mBOhhYHa+YkZMB8GA1UdIwQY MBaAFBXXtf0rKcZoXXridq3nBLWGbHMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEt OWM3MTY3ZDgyZjU2LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEtOWM3MTY3ZDgyZjU2 LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7wOhYMS eh1tvv9ZusSZsDOqQura3cvNop8nnhKTAVnBNlgDmRdtoBi0ulSrCVd1p673uAbf Q4UlXgZ/jkTl6rai3b9WW8EDUkjzQvNkjoDUf88nMTsArmVE0UkTF4rHX95LCYFZ I5m1OjnEOX5ywQ6pF3ZDc2/QKVkYN2FtWm4/HCtnXplByAcGdq8DfT7YXulyShTp c/pZuRjFyKJZA0Y30mCLRi2QZEI8nK6JmvYUE8bpOrfFVI2PCyUC3qUSNQof6i9s l7wMNorW5hG5v91ixjSGb7y34ByRWR3IO/WaM+AwmFPzRwO9gsPowQPBewF6QPZH xhy3+WfrPIcycA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:56 2025 by rpki-client